Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f34372d3437203d3e20323731333533.roa
File:                     323830343a376133303a3a2f34372d3437203d3e20323731333533.roa (raw, json)
Hash identifier:          LOI4JB7fxKKWAgejL4B0HGjnNiVo7CH0eiiWAhSBfzQ=
Subject key identifier:   21:DE:39:BD:DD:BC:C1:B8:88:C2:65:03:EC:17:E1:E1:E7:2A:8E:08
Certificate issuer:       /CN=F5A7136C82E81D3EC065F636CE46776805FFAE48
Certificate serial:       17AD8787F2586332DA26A3FCF002D21BE25022C5
Authority key identifier: F5:A7:13:6C:82:E8:1D:3E:C0:65:F6:36:CE:46:77:68:05:FF:AE:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f34372d3437203d3e20323731333533.roa
Signing time:             Wed 25 Oct 2023 12:07:32 +0000
ROA not before:           Wed 25 Oct 2023 12:02:32 +0000
ROA not after:            Wed 23 Oct 2024 12:07:32 +0000
asID:                     271353
IP address blocks:        2804:7a30::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ad:87:87:f2:58:63:32:da:26:a3:fc:f0:02:d2:1b:e2:50:22:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A7136C82E81D3EC065F636CE46776805FFAE48
        Validity
            Not Before: Oct 25 12:02:32 2023 GMT
            Not After : Oct 23 12:07:32 2024 GMT
        Subject: CN=21DE39BDDDBCC1B888C26503EC17E1E1E72A8E08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b0:e0:c8:f7:0f:f4:dd:30:91:75:af:a0:56:
                    31:79:de:1b:aa:69:3a:e0:fa:8f:60:7d:e4:7c:25:
                    65:b3:51:07:64:4f:00:e2:15:5b:26:db:1c:ad:50:
                    fe:cf:b5:11:76:19:b1:b2:7b:27:53:e1:80:34:e6:
                    54:d7:73:94:7f:1d:9b:c7:56:4d:b7:08:ef:fe:c1:
                    d6:03:c9:36:f4:bf:91:2b:e9:2c:e0:67:08:c6:fa:
                    5d:51:b3:31:a0:f4:98:5b:01:b9:a1:3c:51:14:83:
                    81:79:23:77:f5:3a:ea:2c:43:7b:a0:1a:3d:62:de:
                    33:8a:d6:26:ec:19:63:52:4d:26:d3:d7:4e:ee:09:
                    25:63:92:6c:7e:b8:e6:e8:fb:80:52:fa:db:b5:57:
                    95:73:20:f6:2a:5a:ff:dd:77:35:89:78:9a:1d:e8:
                    0d:9a:63:eb:c4:16:7b:72:f3:59:54:71:1e:52:20:
                    64:4e:2f:dc:e5:d1:84:52:38:ee:8b:01:6a:14:f9:
                    75:5f:e9:fb:0f:6e:f5:0f:ab:af:60:ac:d6:ff:88:
                    1d:7f:1c:18:46:b9:dd:07:ee:30:47:b2:09:ef:b0:
                    f0:aa:b2:e0:58:70:3b:bf:76:3f:5a:b2:29:31:e3:
                    62:b2:2c:69:19:9c:7d:1c:e5:ab:52:d9:d8:a0:6e:
                    80:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DE:39:BD:DD:BC:C1:B8:88:C2:65:03:EC:17:E1:E1:E7:2A:8E:08
            X509v3 Authority Key Identifier:
                keyid:F5:A7:13:6C:82:E8:1D:3E:C0:65:F6:36:CE:46:77:68:05:FF:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5A7136C82E81D3EC065F636CE46776805FFAE48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f34372d3437203d3e20323731333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a30::/47

    Signature Algorithm: sha256WithRSAEncryption
         4f:e9:46:49:df:c1:7c:ae:67:e1:9b:09:38:15:ed:6d:76:fe:
         e3:b1:12:cb:da:2f:ca:85:2c:bc:94:09:d6:7e:d0:a0:2a:f3:
         87:96:ba:13:44:23:e1:44:4d:9c:0e:49:46:5e:17:c3:e4:08:
         3f:3a:5e:26:63:2a:9a:1d:65:d2:2c:95:3b:08:d9:76:f4:58:
         ca:96:d7:1b:87:d5:e4:3e:46:a3:87:6b:b9:ec:5b:ec:90:3b:
         a6:2d:cc:ff:dd:a4:eb:8e:ac:c6:14:fb:04:7b:2c:bb:3e:1e:
         86:c0:f5:ff:5c:f6:de:11:c5:cf:b0:eb:06:6b:75:3f:45:80:
         38:ef:34:e3:09:cd:d0:3b:39:26:63:59:cf:7a:26:90:e8:56:
         51:a7:70:25:e6:c2:5a:c1:64:91:ce:70:03:a2:17:e9:2b:dd:
         9a:24:86:be:bc:9a:6c:06:e9:15:69:55:0e:e2:bf:ca:08:b3:
         0c:49:ad:db:ab:0c:95:27:62:41:d7:7f:f9:84:6b:9a:97:21:
         d9:ff:0f:ea:92:85:fc:43:88:87:d5:9a:4a:4f:3e:8e:99:c2:
         b4:c0:90:9f:0f:b5:f8:ec:17:aa:9b:09:a4:34:86:c3:a8:1e:
         06:7c:60:ca:42:cc:41:75:17:77:92:e7:f7:26:b8:83:11:0d:
         c7:34:75:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org